Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c957d1d7a23ad8b13243b9d3d6f5ce186ffda66.cer
File:                     4c957d1d7a23ad8b13243b9d3d6f5ce186ffda66.cer (raw, json)
Hash identifier:          TVMAZa9obGeE+Iz4kM70TpW69S9/9M139eUeCy8xIUA=
Subject key identifier:   31:1D:4B:61:E5:96:5F:7B:5C:D5:A8:4E:E2:37:75:80:1D:1D:56:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E71303
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2db9a893-47f5-42ba-a249-53bb999f9b32/4c957d1d7a23ad8b13243b9d3d6f5ce186ffda66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2db9a893-47f5-42ba-a249-53bb999f9b32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 20:41:44 +0000
Certificate not after:    Tue 27 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 26594
                          IP: 200.3.96.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15143683 (0xe71303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 20:41:44 2023 GMT
            Not After : Feb 27 06:00:00 2024 GMT
        Subject: CN=4c957d1d7a23ad8b13243b9d3d6f5ce186ffda66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:85:fa:89:ad:ac:86:41:bf:9d:93:71:29:
                    52:ed:2c:41:d1:15:c6:e7:37:e7:de:3d:dc:fe:73:
                    0b:20:d5:19:52:aa:4d:88:69:9a:9a:39:b6:18:ba:
                    17:36:6d:57:8c:e7:fd:25:90:cd:6b:32:18:3e:75:
                    98:a1:00:52:26:03:fb:88:97:74:91:2e:7f:72:f0:
                    d3:2b:68:63:5c:b4:88:15:1e:5d:22:79:5d:4f:dd:
                    09:2f:e2:18:06:08:3f:d2:28:c8:d3:0a:ee:37:f4:
                    92:47:34:60:80:fc:41:66:11:43:82:f2:dc:41:d2:
                    95:52:e7:07:9e:cb:46:ed:f2:09:8f:c4:59:d9:40:
                    15:46:ae:2c:43:85:cc:fa:93:a3:d2:71:68:39:1a:
                    3b:9b:6c:9f:25:38:bb:05:88:c1:02:4c:1e:0f:93:
                    d6:f7:de:bb:aa:46:3c:71:30:74:e2:f7:1c:2d:c6:
                    f2:18:77:87:3c:c0:1a:f2:9f:8c:ae:c7:ba:b7:38:
                    f3:d6:6f:e2:6e:df:d6:35:6d:60:f3:8c:fe:3c:8c:
                    68:ec:79:92:80:57:33:5a:82:bd:b2:1e:f5:68:49:
                    c2:19:38:5e:6c:3d:54:a4:e4:d5:f4:57:39:4f:14:
                    30:fc:31:3e:6c:2c:b3:30:77:16:8d:38:9c:e1:cf:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:4B:61:E5:96:5F:7B:5C:D5:A8:4E:E2:37:75:80:1D:1D:56:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2db9a893-47f5-42ba-a249-53bb999f9b32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2db9a893-47f5-42ba-a249-53bb999f9b32/4c957d1d7a23ad8b13243b9d3d6f5ce186ffda66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.96.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26594

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:69:24:c0:7d:43:a3:e9:2a:1c:2c:a8:02:e8:aa:41:b6:
         6f:8b:d4:eb:90:11:77:4e:6a:eb:05:f7:b8:c8:00:9b:e9:f4:
         1b:f2:d7:28:2e:ca:3f:4b:4a:32:7a:2e:2c:35:c1:8a:04:8e:
         0f:fa:2f:0a:fb:63:2e:f2:a2:cc:eb:e1:56:45:0b:9e:f7:37:
         88:5d:f9:d5:4b:2d:d4:36:9e:d5:fa:80:9b:e9:c5:ee:bd:25:
         14:ec:81:43:75:36:b9:22:3d:42:70:18:e8:f9:2b:23:0d:59:
         0f:71:a4:58:96:50:a0:9e:62:2e:cc:9a:2d:71:ad:f3:a8:49:
         3e:9f:0e:f1:6a:1a:9a:b5:93:65:91:8c:20:41:62:72:d2:60:
         c4:58:25:64:3f:f1:31:ab:90:5f:93:b1:97:0b:ce:3c:d2:af:
         10:19:8f:5b:52:47:dc:3e:b7:0c:50:fe:41:65:c8:21:5f:80:
         3d:a1:6c:60:34:ff:bf:b4:b4:d5:ac:89:10:90:1d:54:02:7b:
         0e:d5:8f:bf:58:ed:59:e9:61:92:28:54:f6:e0:a2:16:6f:e1:
         d3:3c:52:fb:26:20:25:a5:89:d4:51:ce:ea:8e:30:f9:18:e2:
         58:1f:cd:c1:58:d0:60:50:04:ee:73:b1:ae:d9:90:3f:97:c0:
         c6:46:0a:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org